CVE-2022-23649
2 advisories.
Go/github.com/sigstore/cosign CVE-2022-23649: low 3.3, EPSS 0.16%
Improper Certificate Validation in Cosign
Action: Upgrade github.com/sigstore/cosign to 1.5.2 or later.
go get github.com/sigstore/cosign@v1.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.2 | - |
Fixed versions
| 1.5.2 |
Sources
- osv: GHSA-ccxc-vr6p-4858
- https://github.com/sigstore/cosign/security/advisories/GHSA-ccxc-vr6p-4858
- https://nvd.nist.gov/vuln/detail/CVE-2022-23649
- https://github.com/sigstore/cosign/commit/96d410a6580e4e81d24d112a0855c70ca3fb5b49
- https://github.com/sigstore/cosign
- https://github.com/sigstore/cosign/releases/tag/v1.5.2
CVE-2022-23649 · published · modified · JSON
Go/github.com/sigstore/cosign CVE-2022-23649: unknown, EPSS 0.16%
Improper certificate validation in github.com/sigstore/cosign
Action: Upgrade github.com/sigstore/cosign to 1.5.2 or later.
go get github.com/sigstore/cosign@v1.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.2 | - |
Fixed versions
| 1.5.2 |
Sources
- osv: GO-2022-0326
- https://github.com/sigstore/cosign/commit/96d410a6580e4e81d24d112a0855c70ca3fb5b49
- https://github.com/sigstore/cosign/releases/tag/v1.5.2
CVE-2022-23649 · published · modified · JSON